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B.IO.A>KepMaKnH 



BNHHcnHTejiBHa^ cea*B c Mexcea*eB&iM SKpaHOM h MexceTeBod 
3KpaH . 

HacTOH^ee H3o5peTeHHe othochtch k c^epe o5ecneHeHH« 
HH^topMaqHOHHOu 6e3onacHOCTH h , b nacTHOCTH , KacaerpcH 
annapaTHo-nporpaMMHHx KOMnoHeHT MexceTeBMX 3KpaHOB , 

HcnoHBsyeMiiix nnsi npenoTBpameHHK HecaHKqHOHHpoBaHHoro nocTyna h 

06MeHa HH^OpMai^HGH Mexny paSnHHHHMH a60HeHTaMH KOMnBIOTepHHX 

ceTeH . 

B HacTOHniee BpeMH 6onBmHHCTBo jiOKanBHUX BfiiHHCJiHTenBHZiix 
ceTeii (JIBC) noRKnioHeHBi k cgth HHTepneT. OnHaKo oTcya?CTBHe 
BCTpoeHHux cpeHCTB 3amHTH HH$opMaqHH B cymecTByiomHx CeTeBKX 
npoTOKonax xbh^btcsi npHHHHOH pasnHHHHx HapymeHHH qenocTHOCTH 
nepej^aBaeMMX naHHHX. nosTOMy pacmnpeHHe cneKTpa h noBBimeHKe 

Tpe60BaHHH K ypOBHK) KOH$HneHI^HaJIBHOCTH CeTeBHX npHJlOXeHHH 

Tpe6yeT HcnojiBSOBaHHK cneqssanBHfiix TexHH^ecKHX cpencTB 
pasrpaHHHeHHH flocTyna k HH^opMai^HOHHUM pecypcaM h kohtpoji^ 

06MeHa naHHBMH MeXfly pasnHHHWMH KOMnBIOTepHBIMH CeTilMH. B 

KanecTBe TaxHX cpencTB samHTU niHpoKO npHMeH^ioTCH MSXceTeBBie 
3KpaHi)i, HashiBaeMwe b aHrno^sbiHHOH nHTepaType ^aspBonaMH 
(firewall). MexceTeBOH 3KpaH npencTaBn^ieT co6oh 

cnequanHSHpoBaHHoe ceTeBoe ycTpoHCTBO, KOTopoe BKniOHaeTCii 
Mexny flByMH cerMeHTaMH JIBC TaxHM o5pa30M, hto bgcb o5MeH 
ceTeBEiiMH naKeTaMH Mexny 3thmh cerMeHTaMH orpaHHHHBaeTCH c 
noMomBK) cneqHanBHbix npaBHn ^HHBTpaqHH Bxon^mHx h HCxon5imHx 
noTOKOB naHHbix. TaKoe ycTpoHCTBO MoxeT 5e)Itb TaKxe ycTanoBJieHO 
Mexny 3amHmaeMHM cerMeHTOM JIBC h MapmpyTH3aTopoM^ ohhh h3 



nopTOB KOTOpOrO nOnKHDHeH K CeTH HHTepHefP. npH 9TOM 

HcnonBsyeMBie npasHna $H^BTpa^HH naKeTHoro Tpa^HKa Moryr 
BKnx)HarrB sanpeT aa nepenany HH^opMaqHH xaK HsayTpH, TaK h 
BOBHyTpB saiRHii^aeMoro cerMeHTa JIBC, BKniOHan kohtpohb 
onpeneneHHiax noJiBSOBaTeneH b yca?aHOBneHHfiie HHTepsanBi speMeHH 
cyTOK, HenenB hhh MecHi^eB. 

H3BecTHa cHCTeMa samHTN nn^ wsyx KOMnBiOTepH&ix ceTeft, 
onHcaHHaH b pocchhckoh naTGHTHOH saHBKe A 96118130/09. 3Ta 
CHCTeMa saiqHfTsi conepxHT nne ceTeBue MaTepHHCKHe njiaTH h 
npenHasHaneHa nnn npenoTspaiqeHHix HecaHKi^HOHHpoBaHHHX o6MeHOB 
naHHEdX Mexny nepBOH h BTopoii KOMnBiOTepHBiMH ceT^iMH. Kaxna^ h3 
yxasaHHEix nnaT HMeeT ceTeBOH HHa?ep$eHCH£iH ananTep jxnsi o6MeHa 
naHHHMH c yKasaHHHMH Bume cgt^mh . npH 3TOM Kaxna^ H3 
yKasaHHUx MaTepHHCKHX nnaT TaKxe HMeeT ananTep nepenann flanKHX 
nnji oSMena HH^^opMai^HH c a^anTepoM npyrofi ceTeBOH MaTepHHCKOfi 
nnaTH h HcnonBsyeT cnei^nanBHwe nporpaMMHbie cpencTBa j^nsi 
npenoTBpaiqeHHH nepe^aHH HH^opMaqHH o5 ycnyrax MapmpyTHsaqHH 
Mexny ceTeBKMH HHTep^eHCHHMH a^qanTepaMH h ananTepoM nepenann 
naHHMx. Kaxna5i ceTeBan MaTepHHCKa^i njiaTa nononHHTenBHO 
coflepxHT nporpaMMHBie cpencTBa npeoSpasoBanH^i npoTOKOJia, 
npen^iTCTByiomHe npoxoxoeHHio HH^opMai^HH o $yHKqHOHHpoBaHHH 
npoTOKOJia Bepxnero ypoBHH h HH$opMaqHH o5 anpece HCTOHHHKa h 
a^pece Ha3HaHeHH5i Mescny yKasanHsiM B£jme ceTeBBiM HHTep$eHCHi>iM 
ananTepoM h yKasaHHHM ananTepoM nepe^aHH flaHHMx Kax^oH ceTeBOH 
MaTepHHCKOH nnaTH. npn 3TOm onna h3 ceTeBwx MaTepHHCKHX nnaT 
HMeeT cneiiHanBHue nporpaMMHue cpe^cTBa noj^nepxaHH^ HHTep^edca 
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BsaHMoneficTBHA Ha npHicnannoM ypoBee jxnx BunoJiHiieBisix 

cooTBeTCTBywnjHX 3anaH . 

OnHcaHHan Bume CHCTeMa saiuHTBi no BunonH^ieMUM $yHKC(H5iM 
MOXGT 6bitb KJiaccH^HLtHpoBana KaK cepsep-npej^cTaBHTenB (proxy- 
cepBep) HHH ysen KOMnBiOTepnoH cgth, ycTanasnHBaioiaBH coenHaeHH^ 
OT HMGHH H no nopyHSHHio sapePHCTpHpoBaHHoro ceTeBoro KHHenTa. 

npH HcnojiBSOBaHHH proxy-cepBepa b KanecTBe MexceTesoro 
3KpaHa Tpe5yeTCH, hto6h ceTesoH KnaeHT ocyniecTBJiHn p«A 
nonojiHHTenBHue ceaHCOB cbhsh no ycTaHOBneaHia ceTesux 

COenHHGHHH, HTO npHBO^HT K CHHXeHHK) 06n)eH CBTeBOH 

npoHSBonHTenBHOCTH H yBenHHeHHK) sanepxex nepenaHH naxeTOB 
oco6eHHO B cnynae nocnenoBaTenBHOPO coe^HHenHH necKonBKHx 
KOMnBioTepazax ceTen, pasneneHHKix Mexny co6oh MexceTeB£iMH 
SKpanaMH yxasaHHoro THna. 

3th HenocTaTKH npeoy^oJieHBi B H305peTeHHH^ paCKpKTOM B 
naTGHTe US 5,898,830, KOTopoe hbjihbtc^i HaH6onee 5jih3khm k 
HacTOiimeMy H3o6peTeHHK). 3tot MexceTBBOH sxpan, 6yHyHH 
ycTaHOBneHHbiM b Kanan HH$opMai^HOHHoro o5MeHa Mexny j^syM^i 
KOMHBiOTepHWMH CGTHMH , o5ecneHHBaeT npospaHHocTB MexceTeBoro 
B3aHMoneHCTBH>x MTisi HO JiBSOBaTeneH 3amHmeHHoro cerMeHTa . Unsi 
3Toro. MexceTeBOH SKpaH nonnepxHBaeT KOH^HrypaqHio nsyx Ha5opoB 
BHpTyanBHKx a6oHeHTOB. nepswH naSop a6oHeHTOB moxst 6BITB 
anpecoBan tohbko go CTopoHH 3amHmeHHoro, a BTopoH - co CTopoHw 

OTKpMTOrO CerMGHTOB CeTH . 

PaccMaTpHBaeM&ie Ha6opfii BHpTyanBHtix a6oHeHTOB nporpaMMHO 
CBK3aHE)i Mexny coSoii c noMomBio Ta5nHqw cootbbtctbhh hx ceTeBsax 
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anpecoB, aHanorHHHo TOB«y, icaK bto nenaeTCA npH HcnoTiBSOBaHKH 
DNS cepBepoB. Ilepenana hhh sanpeT nepenann naKeTOB ot 
BHpTyanBBoro a6oHeHTa onHoro Ha6opa anpecoB k BHpTyajiBHOMy 
aSoaeHTy h3 npyroro Ha6opa anpecoB ocymecTBn5ieTCH b 

COOTBeTCTBHH C npaBHJiaMH ^HJlBTpai^HH naKeTOB^ COXpaHHeMblMH B 

KOH^iHpypaqHOHHOM ^aiine MexceTeBoro SKpana. 

BHpTyajiBHBie a6oHeHa*fii, 3a HCKniOHeHHeM onHoro^ kotophh 
cnei^HanBHO BunejieH hjih 3Toi& i^enH, He hmgot nocTyna k ^annoBOft 
cHCTeMe H npyx'HM CHcrreMHUM pecypcaM ycTpoHCTBa, Ha KOTopoM 
^aKTHHecKH peanHSOBaH MexceTesoH sKpan. YnpaBnniomHH 
nporpaMMHHH MonyjiB ocymecran^eT KOH^Hpypai^Hio MexceTeBOPO 
3KpaHa, B HacTHOCTH, reHepai^HX) BHpTyanBHsix a6oHeHTOB b 
COOTBeTCTBHH c sanHcaHHHM KOH$Hrypai^HOHHMMH ^aiinaMH npH 
nepBOHananBHOM CTapTe naHHoro ycTpoiiCTBa. HocTyn k 
KOH^HpypaqHOHHEiM ^aHJiaM ocyn^ecTBH^eTCK c HcnonBSOBaHHeM npaBHn 
c $yHKi^HHMH aBTopHsaqHH Hepes cneqHajiBHoro BHpTyajiBHoro 
a6oHeHTa, anpecyeMoro h3 KOMnBioTepnoH ceTH* 3th npaBHna 
BKJiK)HaK)T npoBepKy nonnHHHOCTH h asTopHsai^HK) sanpamHBaiomero 
ROCTyn aSoHeHTa. Korna nocTyn sanpamHBaiomeMy aSoneHTy 
npenocTaBneH , b KOH^HrypaiiHOHHbiH $aHn MeacceTeBoro SKpana, 

KOHTpOnHpyiOmerO HH^OpMai^HOHHBIH 05MeH Meacny KOMnBWTepHHMH 
CeTHMH, MOPyT 6I1ITB BHeCeHBI H3MeHeHHiI. 

ynoMHHyTan BBime npospanHocTB SKpana no OTHomeHHio k 
npoTOKonaM ceTeBoro ypoBHH He osHaHaeT, hto 3KpaH ne MoxeT 
6fi[TB o6HapyxeH npn npHMeHeHHH cneqHanBHwx nporpaMMHux cpencTB. 
TaK KaK Ha6op samHiqaeMHx ceTeBux ysnoB SKpannpyeTC^i orkhm 
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ceTOBHM HHfrep^eflcoM paccMaTpHBaeMoro ycTpoHCTBa saQHVH, to Ha 
KaHajiBHOM ypoBHe MexcefreBoro BsaHMoneHCTBH^i Kaxntid h3 sthx 
ysnoB HfleHTH^HqHpyeTCH no cooTBeTCTByiomeMy $H3HHecKOMy anpecy 
3Toro xe ceTGBoro HHTep$eftca. 

npoqenypa npoBepKH nonnHHHOCTH a6oHeHTa cgth^ 
ynonHOMOHGHHoro na nonyneHHe nocTyna k KOH^HrypaqHOHHOMy 
$aHny, y^zssHMa nnsi snoyMumneHHHKOB , hto nonpasyMeBasT 
B03M0XH0CTB HecaHKi^HOHHpoBaHHoro flocTyna BCTiencTBHe nop6opa 
napojieii hhh HcnonBSOBaHHA He Bu^BneHHoro HecoBepmeHCTBa 
nporpaMMHoro o6ecneHeHHH npHMeHHeMoro ycTpoiiCTBa samHTN. 

B ocHOBy HacTo^n^ero H3o6peTeHH5i nonoxen npHHqHn 
I'apaHTHpoBaHHOH 6e3onacHOCTH , ocnoBaHHUH Ha HeHcnonB30BaHHH 
HHH nonnoM coKpiaTHH anpecoB ceTeBKix HHTep4)eHCOB ycTpoHCTBa 

3aiI(HTfi[ • 

nocTaBneHHa5i sanana peraaeTC5i tbm, hto MexceTSBOH 3KpaH, 
oSnaj^an ceTesHMH HHTep^eficaMH hjih o6MeHa naHHHMH Mexj^y 
ce37MeH<raMH cgth, paccMaTpHBaeTCH KaK ne anpecyeMHH (naccHSHKH) 
ceTeBOH ysen, to ecTB ne HcnonBsyeT npH cbosm $yHKqHOHHpoBaHHii 
ceTeBHx anpecoB, accoLtHHpyeMwx c sthmh HHTep^eiicaMH oSMena, a 
$H3HHecKHe anpeca ceTeBsix HHTep^encoB ne nepenaeT bo BneciHioK) 
CBTB. • nosTOMy HanHHHe MexceTeBoro SKpana ne moxgt 5bitb 
o6HapyxeHO HHxaKHMH TexHHHecKHMH cpencTBaMH, pacnonoxeHHWMH b 
OTKpBjTOM HHH samHiReHHOM cerMeHTB CGTH . ComacHO H306peTeHHK), 
nnn ynpaBneHHH npoqeccaMH $HJiBTpaqHH naKeTHoro Tpa^Hxa 
MexceTeBOH sxpan nononHHTenBHO co^epxHT, H3onHpoBaHHHH ot 
ceTeBfiix HHTep^eticoB, cnei^HanBH&iH HHTep^enc ynpaBneHHii. Bee 
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HSMeHGHHii nporpaMMU $Hn&Tpai;HH naKeTHoro Tpa^iHKa, a TaKxe 
ynpaBneHHe ceTesHMH coenHHeHH>iMH MoryT 5ntb B&inonHeHH 
HCKJiK)HHTenBHO HGpes HHTep^edc ynpaBJieHHH^ hto nonHOCTBK) 
ycTpaHHeT bosmoxhoctb HecaHKi^HOHHpoBaHHoro nocTyna k 
MexceTeBOMy SKpany co CTopoHH nonBSOBaTejieH pacnonoxeHHHx Kaic 
B samHmeHHOM^ TaK H B oTKpHTOM cerMGHTax JIBC. Sanana 
o6ecneHeHHH rapaHTHpoBaHHOii san^HTBi pemaeTCH TaKxe c noMomB© 

HeBOSMOXHOCTB C03?^aHHH CO CTOpOHH nOHBSOBaTeneH OTKpHTOrO 

h/hhh san^Hii^eHHoro cerMeHTOB cbth c^e^Ha^BHO^o Kaaana nepe^aHH 
naKBTHMx naHHHx Mexny ceTeBfiiMH HHTep^eficaMH h ynpaBnniomHM 

HHTep^eHCOM C nOMOntBK) BHyTpeHHeH CHCTeMHOH mHHH BBIHHCnHTeXIH , 

Ha 6a3e Koroporo nocTpoeH MexceTeBOH sKpaH. IIpH 3a?oM 
MexceTeBOH 3KpaH coxpaH^eT HBHSMeHHoii HH^opMai^HD o5 a^pecax 
OTnpaBHTenH n/nnH nonynaTenn o5pa5aTHBaeMoro c noMomBio npaBHn 
$HnBTpaqHH naKeTOB^ hto nosBOJiHGT nonHOCTBio ckphtb ftaKT 
cymeca?BOBaHH5i MexceTeBoro sKpana hhh nojiBSOBaTenen samnmeHHoro 
cerMeHTa cgth . 

Hhbimh cnoBaMH, nporpaMMa $HnBTpaqHH HCKnioHaeT MexceTeBOH 
3KpaH H3 HHcna nonynaTeneH HH^opMai^HOHHHx naxeTOB, nocTynaiomHx 
Ha ceTGBHe HHTep^eficH, a MexceTesoH sxpan HacTpoen nepepaBaTB 
BOBHe Hepe3 ceTeBue HHTep^eHCH, HCKnioHHTenBHO TaxHe 
HH$opMaL(HOHHHe naxeTH , OTnpaBHTenH KOTopwx hbhhiotch BnemnHMH 
no OTHomeHHK) k MexceTeBOMy sxpaHy. 

HacTonmee HSoSpeTenne nonpoSHO paccMOTpeno nanee na 
npHMepe ero peajiHsauHH co ccHnxaMH na nepTexH, na xoTopHx: 
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OHr. 1 H3o6paxae7 BHemHHil bhp BfiinonHeHHoz*o corjiacBO 
HacTOHn^eMy H3o6peTeHHK> MexceTeBoro SKpana, co CTopoHfii naaejiH, 
Ha KOTopoii pacnonoxeHu opraHU ynpaBneHHH h HHTep^edCH BHemHHX 
coeflHHeHHH; 

^Hr. 2 - cxeMy coenHHeHHH OByx noKajiBHHx BUHHcnHTejiBHUx 
ceTefi Mexny co6oh h c BHemneS ceTBio nepes MexceTeBOH 3KpaH, 
BunojiHeHHUH co3?nacHO HacTOHn^eMy H3o6pefreHHK>« 

<^Hr. 3 - ynpomeHHHii anropHTM nporpawMH ynpaBJieHHH 
nepenaneH HH4)opMaqHOHH£ix 6noKOB, nocTynaioiitHx Ha orhh h3 
HHa?ep$eHCOB oSMena MexceTeBoro SKpana , BHnoJiHeHHoro cornacHO 
HacTOHn^eMy H3o6peTeHHK). 

OnHcaHHe, npHBeneHHoe HHxe, npennonaraeT 3HaKOMCTBo c 
HaH6onee ynoTpe5HTenBHbiMH TepMHHaMH h noHHTHiiMH, OTHOcnmHMHC^ 

K BfilHHCnHTenBHOH TeXHHXe, H B HaCTHOCTH, K BUHHCJIHTeJlBHIiM 
CeTHM. 

B cooTBeTCTBHH c npeRnoHTHTejiBHOH peanHsai^HeH nacTOiimero 
H3o6peTeHH5i, H3o6paxeHH£iH Ha OHr. 1 MexceTeBOH 3KpaH 1, 
npHcnoco5neHHHH nnsi paGoTBi b noxanBHOH BBiHHcnHTenBHOH cgth 
(JIBC), npeflCTaBJiHeT co5oh cneqHanHSHpoBaHHbiH BbiHHCJiHTenB co 

BCTpOeHHOH OnepaqHOHHOH CHCTeMOfl. TaKOH BMHHCnHTenB MOXeT 55ITB 

BHnojiHeH c HcnoHBSOBaHHeM cepHHHo BKnycKaeMwx MaTepHHCKHX njiao? 
nepcoHanBHux KOMnBiOTspoB , nanpHMep, nnaTw $hpmm Gygabyte, GA- 
5AX, B KOTopoH npenycMOTpena bosmoxhoctb noHKnioHeHH^ no 5-th 
nepH^epHHHHx ycTpoHCTB K BHyTpeHHeii CHCTeMHOH mHHe PCI . 
BtiHHcnHTenB MexceTeBoro sKpana, Ha KOTopoM BHnoriH^iioTCH sa^ann 
$HJiBTpaqHH non ynpaBnenneM BCTpaHBaeMOH onepaqHOHHOH CHCTeMM 
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MOseT 6uT& BfiinonHeH Ha 6a3e HecKonBKnx frsinoB npoqeccopos 
o6iiiero HasHaneHHH, ^kjik)hglsi Pentium MMX, Cyrix Mil, AMD K-6, 
RISC MIPS H np. MexceTesoji 3KpaH 1 coj^epxHT ceTeBue 

HHTep^eHCBi nnsi o6MeHa naKeTHUMH nannuhm, b KanecTBe KOTopux 
MOi^T 611ITB HcnoHBSOBaHfii ceTeBue a^anTepH Ethernet pasnHHHoro 
fPHna CO CKopocTBK) nepenaHH 10 M6ht/c nnsi mHHH ISA khh 10/100 
M6ht/c nnfL mHHH PCI, nanpHMep, Fast Etherlink XL $hpmeii 3Coin. 
Ha nHqesod naHenn 2 MexceTeBoro 3KpaHa 1 pacnonoxeHBi 
coenHHHa?enH jxnsi vpex HHTep^edcoB o6MeHa naHHUMH, o6o3HaHeHH£ix 
no3HtiH5iMH 3 , 4 , 5 . K xax^^OMy hs ceTeBKx ananTepoB nonKJisoneH 
ceiveHT noKanBHod BfiiHHCJiHTenBHod ceTH, nocTpoeHHoii no 
apxHTeKType o&iubA mHHfii h HcnonBsyioiiieH npoTOKon Ethernet. 
MexceTeBOH 3KpaH 1 Moxea? 6htb npHcnoco5neH nnn noHKniOHeHHK 
6onBmei?o KonHHecTBa cerMeHTOB JIBC, b nacTHOCTH, HcnonBsyeMan 
MaTepHHCKa^z nnaTa Moxeo? o6ecneHHTB no^KniOHeHHe 5-th 
cerMeHTOB JIBC. Ecnn b JIBC HcnojiBsyeTCH npyroH npoTOKon, to 
npHMeHHeMHe ceTeBue ananTepn MexceTeBoro SKpana , j^onxHfii 
nonoepxHsaTB 3tot npoTOKon BsaHMoneHCTSHH . 

Ha nanenH 2 ycTaHOBJieHH TaKxe coeflHHHTenH Ha 9 h 25 

KOHTaKTOB, COOTBeTCTBeHHO , HHTep^eHCOB 6 H 7 COM HOpTOB 

CTannapTa RS232C. Q^hh hs hhx HcnojiBsyeTCH b KanecTBe 
HHTep^eHca ynpaBneHHH nn^ pepiaKTHpoBaHHH nporpaMMu ynpaBnenHH 
HH^opMaqHOHHMM o5MeHOM Mex^y ceTeBBiMH cerMeHTaMH JIBC, 
coenHHHeMbiMH nepes MexceTeBOH SKpan 1 . CerMeHTbi JIBC , b 

SaBHCHMOCTH OT HX KOHHHeCTBa , MOryT 5bITB nOflKJIIOHeHhl K 
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HHTep^edcaM 3 , 4 , huh 3 , 4 , 5 , cooraeTCTBeHHO • Ha nanene 2 
ycTaHOBnen TaKxe coenHHHTejiB 8 h BMKniOHaTenB 9 3 JieKTponHTaHHH • 

B paccMaTpHsaeMOM npHMepe peajiHsai^HH H3o6peTeHH5i, b 
MexceTeBOM sxpaHe 1 HcnonBsyeTCH onepaqHOHHan CHCTeMa THna 
UNIX, o6ecneHHBaK)iaa5i MHOx^osaj^aHHyio paSoTy nporpaMMU ynpaBnenHH 

B COOTBeTCTBHH C KOH$HI?ypaqHOHHHM $aHJIOM, COXpaH^eMBIM B 

3HeproHe3aBHCHMOM ycTpoHCTBe naMHTH MescceTeBoro 3KpaHa 1 • 

*Hr. 2 HJiniocTpHpyeT ohhh h3 BapnaHTOB nonKnx)HeHHH JIBC k 
MesceTesoMy aKpany 1 . B 3tom npHMepe MexceTeBod SKpan 1 nenHT 
samnmaeMyio KopnopaTHBHyio JIBC 10 c niHHHofi apxHTeKTypoii na 
cerMeHTH 11, 12, 13 nonKjisHeHHue , cooTBeTCTseHHo , k ceTesBiM 
a^anTepaM 3, 4, 5. TaKan CTpyKTypa JIBC 10 mosgt HcnonBSOBaTBC^ 
B KopnoparPHBHOH KOMnBioTepHOH ceTH, B KOTopoH pasHHe ceTeBKe 
cerMGHTfii npenHasHaneHEii rjih o6cnyscHBaHHA pasHBix thhob 
HH4)OpMai^HOHHNX npHJioxeHHH . 3a?H npHxioxeHHii MoryT hmstb 
pasjiHHHfiie Tpe6oBaHH5i k ypoBHio KOH4)HoeHi4HanBHOcTH nepenaBaeMHx 
naHHwx, HTO yHHTHBaeTCii B npaBHjriax $HnBTpai;HH, npHMeH^eMMx hhh 
Kaxfloro H3 ceTeBHx HHTep^eiicoB, 

B HacT05imeM npHMepe cerMeHT 13 conepxHT TonBKO onnoro 
a6oHeHTa, mntos 14, xoTopuH o5ecneHHBaeT coenHHeHHe JIBC 10 c 
BHemHeH ceTBio 15. CeTB 15, b cbok) onepeoB, moxbt Swtb 
coeflHHeHa c npyrHMH c&Tsmn. mnios 14 MoxeT HcnonBsosaTB 
MOReMHHe HHHHH CB^SH Rjiii coeoHHeHHH JIBC 10 c ceTBK) HHTepHeT no 
KOMMyTHpyeMHM KananaM. 

KaxHNH H3 cerMeHTOB 11, 12 JIBC conepxHT HecxonBKo 

aSOHeHTOB 16, 17, COOTBeTCTBeHHO, nOOKniOHeHHIilX K 3THM CeTeBMM 



10 

cerMeHT£iM c noMoii(BX> a^anTepoB 18 THna Ethernet. Unsi sHeceHH^ 
H3MeHeHHH B npoppaMMy ynpasjieHH^ nepenanefi ceTeBcix naKBTOB 
MB^Y HHTep4)e6caMH 3, 4 h 5, KOTop&ie MoryT KacaTBCH npaBHn 
^HnBTpai^HH, K ynpaBH^iiomeMy HHTep$eftcy 6 nonKHronaiOT 
nepcoHan£>H£iH KOMnBioTep 19. Pe^aKTHpoBaHHe nporpaMMH ynpaBJieHHH 
ocymecTBnneTCH Ha KOMnBK>Tepe 19 c noMOiqBio cTaHoapTHoft 
nporpaMMH Web HaBHraTopa (Spaysepa), nanpHMep^ Netscape 
Navigator nyTeM ycTaHOBneHHA asTopHSOsaHHoro c noMomBio napojiii 
coenHHeHHH Mesny KOMnBiOTepoM 19 h MexceTesciM 3KpaHOM 1 no 
npoTOKony « TOHxa - TOHKa » ( npoTOKon PPP ) . 

nporpaMMa ynpaBneHHH o6ecneHHBaea? nepenany ceTesux naxeTOB 
Mexpy ceTeBEiMH HHTep^edcaMH , KOTopsie anpecoBaHBi k 
noHBsoBaTejiKM oTKpHToro HHH samHmeHHHx cerMeHTOB. TaK xaK 
MexceTeBOH 3KpaH He HMeeT anpecoB, accoqnHpyeMEax c ero 
ceTeBbiMH HHTep^eHcaMH , TO OH He MoxeT 5IBJIHTBCH nojiynaTejieM 
HHxaKHx ceTeBBix naKBTOB^ a BHCTynaeT b pojiH hhSo naccHBHoro 
TpaHSHTHoro ysjia Mex^qy ceTeBBiMH HHTep^eScaMH , nH5o MORennpyeT 
paspfiiB ceTeBoro coenHHeHHn nyTeM OT6pacMBaHH5i naxeTOB, He 
npomefliuHX, ycTaHOBneHHHe j^uh nyrn MeacAy flaHHWMH HHTepieHcaMH , 
npaBHna ^HnBTpaqwH . 

nporpaMMa ynpaBneHHH, xoTopan KOHTponHpyeT paSoTy 
HHTep4)eHcoB 3 , 4 , 5 oGMena naxeTHHMH naHHBiMH ( npaHBep ceTeBKx 
ananTepoB Ethernet) HacTpoena TaxHM o6pa30M, hto conepxHMoe 
noHH aj^peca OTnpaBHTenn b HH^opMai^HOHHwx 6jiOKax, nepenaBaeMux 
H3 MexceTeBoro sKpana 1 nepes HHTep^eHCN 3 , 4 , 5 , coxpaH^eTCH 

HeH3MeHHSIM. 
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injix>3 14 BBinonHAeT ^lyHKqHH MapmpyrasaTopa , o6MeHHBaionieroc^ 
HH$opMaqHeii o coctohhhh ceTeBMx coenHHeHHfi c aHanorHHHBiMH 
ycTpoftcTBaMH H nepeflaioiqero naKeTHuft Tpa$HK b npyrne cerMeHTs 

KOpnOpaTHBHOH CeTH HHH CGTB HHTepHGT • 

TaKHM o6pa30M, JIBC 10 MOxeT 5biTB HaflexHo aamnmena 
MexceTeBBiM SKpanoM, ceTeBue HHTep$eftcBi KOToporo, cornacHo 

HaCTOHQieMy H3O5peTeHH!0^ He HMSIOT KaK $H3HHeCKHX (MAC), TaK H 

norHHecKHx (IP) anpecoB. TaKoii MexceTeBOH 3KpaH HenocTynea nn^i 
ynaneHHfiix aTaK nepes KOMnBK>TepHfiie csth, TaK KaK ne MOxeT 
5IBJISTBCH nojiynaTeJieM HH$opMaqHOHHiiix naKBTOB. Eme pas 
nonHepKHGM, HTo Mexcea?eBod 3KpaH He MoxeT 6UTB o6HapyxeH 
CTaHRapTHBiMH cpenca?BaMH ceTB^oA HnenTH^HKai^HH, TaK KaK 
HcnojiB3yeM£ie jxnfi cb^sh c ceTBBHMH cerMSHTaMH HHTep^eficBi THna 
Ethernet ynpaBn^iDTCii TaKHM o6pa30M, hto He OTBenaeT na 
mHpoKOBemaTenBHBie ARP sanpocH o cbobm $H3HHecKOM (MAC) anpece. 

4>Hr. 3 HnniocTpHpyeT pa6oTy ajiropHTMa $HnBTpaqHH naKSTOB, 
nocTynaiomHX Ha ceTesoH HHTep^enc 5 . 

KaxHHH naKBT, nepenaBaeMHH nepes cerMeHT 11 b JIBC 10, 
npHHHMaeTCH HHTep^eficoM 5 h saHOCHTCH b Sy^epnyio naM^iTB . 
nepBHHHaiz o6pa5oTKa comacHO npaBHnaM $HJiBTpauHH ccctoht b 
nocnenoBaTenBHOM BbinojiHeHHH onepaqHH 20, 21, to bctb 
nocnenoBaTenBHOH npoBepKe npHnaflnexHocTH $H3HHecKoro anpeca Ad 
nony^aTenn, coflepxamerocH b 3aronoBKe o5pa6aTHBaeMoro naKBTa, 
saneceHHOMy b TaSnHqy K3 cnncKy paapenieHHux anpecoB j^nn 
aeoHBHTOB cerMeHTa 11 (a>Hr. 2), nonKJironeHHoro k HHTep^eficy 3, 
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a saTBM K cnBCKy anpecoB a6oHeHTOB nonKJiioHeHHoz^o k HHTep^eiicy 
4 cerMeBTa 12, conepsaiqeMycH b Ta6nHqe K4 • 

naKeT c aflpecoM nonynaTenH/ KOTopuH OTcyTCTByeT b o6eHX 
Ta6nHU(ax K3, K4 - OT6pacBiBaeTCH. Ecnn anpec nonynaTen^ 
npHHapjiexHT Ta6nHqe K3, to npoHSBOHHTCH npoBepsa naKeia b 
cooTBeTCTBHH c Ha6opoM npaBHn TecT 3 , H3o6paxeHHaii onepaqneH 
22, B npoTHBHOM cnyHao HcnoJiBsyeTC^i onepatiHH 23 conepxama^ 
npyroH Ha6op npaBHJi, TecT 4. 

B03M0XH0CTB HcnonBSOBaHHH pasjiHHHBix npaBHJi npoBepKH 
HH^opMaqHOHHUx 6J10K0B, a^pecoBaHHsix B pasHBie cerMeHTH JIBC 10, 
nosBonneT paanejiHTB a6oHeHTOB no ypoBHio 6e3onacHOCTH h 
KaTeropHHM npHnoxeHHH. B cootbgtctbhh c sthmh KaTepopam^ii 
pasjiHHHHe noHBsoBaTejiH noflKnioHaioTCH k pasHmi ceTeBWM 
cerMeHTcLM, nanpHMep, k cerMBHTy 5a3bi naHHax aBTopH3HpoBaHHHX 
nojiB30BaTeneH hhh cerMGHTy TexHHHecKoro oTnena KopnopaTHBHOH 

CGTH. IIpaBHJia $HJlBTpai?HH naKBTOB yCTaHaBHHBaiOTC^ H H3MeHHK)TCH 
TOJIBKO aRMHHHCTpaTOpOM JIBC 10 C nOMOmBK) KOMnBIOTepa 19, KOTOpBIH 

no cnei^HanBHOMy Kanany c HcnojiB30BaHHeM naponn nocTyna Hepe3 
BBineJieHHBiH ynpaBHHiomHH HHTep4)eHc 6 (4>Hr.2) na onpeneneHHoe 
BpeMii, HeoSxoflHMoe nnsi BHeceHH^ HSMeHeHHH, noHKmoHaeTC^i k 
MexceTeBOMy sKpaHy • 

Pe3ynBTaTbi npoBepKH no Ha5opaM npaBHJi TecT 3 h Tgct 4 
accouHHpywTCH c norHHecKHMH nepeMeHHBie T3 h T4 , npHHHMaiomHe 
SHaneHHe TRUE, ecnn nepejiana HH$opMaqHOHHoro 6noKa paspemena, 
onepaqHH 24, 25. Ecnn T3 = TRUE, to naKGT nepenaeTc^i nepes 
HHTep$eHC 3 B cerMGHT 11. EcHH naKST, anpecoBaHHBiH b cerMGHT 
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12, ycnemHO npomen nposepKy no Ha6opy npaBHn TecT 4, to 
nepeMeHHan T4 = TRUE, h naKeT nepenaeTCH nepea HHTep$eiic 4. 
npH HecooTBeTCTBHH a7pe6oBaHHAM npaBHn ^HnBTpaqnH naxeT 
OT5pacHBaeTC5i . 

05pa6oTKa naKSTa b MexceTeBOM 3KpaHe 1 , nocTynaromHX , 
HanpHMep, nepes HHTep^eftc 3, npoH3BonHTC« b cootbgtctbhh c 
onncaHHUM Bume anropHTMOM (*Hr. 3) sa HCKnioHeHHeM npHMeHeHHH 
Tex npaBHn, KOTopwe HcnonBsywTC^ nn^i samHTH HanpaBnenH^ 
nepe^aHH «HHTep$eHC 3 - HHTep4)eHC 5» nnn «HHTep$eiic 3 - 
HHTep$eHc 4 » . 

OnHcaHHHH BHine xapaKTep $yHKqHOHHpoBaHHH MexceTeBoro 
3KpaHa He HCHepnHBaeo? OHeBH^Hux cnei^HanncTy BapnaHTOB 
npHMeneKHH aacTOHmero H3o6peTeHHH ne BBixonJimHx sa npeflenu 
cymecTBa npennoxeHHoro pemeHHH , KOTopue onpenenKiOTCH $opMynoH 

H306peTeHH5Z • 
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♦OPMYJIA H30BPETEHHH 

1. JioKanBHa^i BHHHcnHTenBHaH ceTi> nepenaHH naxeTOB, b 

3arOJlOBKaX KOTOptlX COnepxaTCH CBe«eHHH O $H3HHeCKHX H 

norHHBCKHx anpecax oTnpaBHTenH h/hjih nonynaTenK HH$opMaqHH.. 
HMeeT pa3neJt5iK)mHH ee no MSHBrneH Mepe Ha RBa cerneHTa 
MexceTeBOik 3KpaH, npencTaBnniomHii coSoh KOMnneKC annapaTHHx h 
nporpaMMHbix cpencTB, co^epxamHH no MeHBmefl Mepe nBa ceTeBNx 
HHTep$eHca nnn o6MeHa nByHanpaBneHHHMH noTOKaMH naKeTOB Mexfly 
cerMeHTaMH cea?H h nporpaMMy ynpaBneHHH npoqeccaMH naKBTHOH 
KOMMyTaqHH Mexny ceTeBMMH HHTep^eiicaMH , KOTopiae npoHCxon^iT na 
ocHOBe npHMeneHHH npaBHn $HnBTpaqHH, oTnHHawma^ic^i tsm, hto 
nporpaMMa ynpaBneHHH He nasHa^aeT ceTesNM HHTep4>eHcaM 
norHHecKHx anpecoB h He nepe^aeT b BHHHcnHTenBHyio ceTB 
HH$opMaqHK) 06 Hx $H3HHecKHX aflpecax, npH 3tom nporpaMMa 
ynpaBneHHH pa3pemaeT TpanSHTHyio nepe^any nepes ceTeBHe 
HHTep$eHCBi MexceTeBoro SKpana tohbko Tex naxeTOB, napaneTpM 
saronoBKOB KOTopax nporann npoBepKy na cooTBeTCTBHe 
ycTaHOBneHHMM npaBHnaM $HnBTpai^HH, a onn sananHH sthx npaBHn h 
KOHTponH 3a cocTOHHHeM ceTeBbix coenHHeHHH HcnonB3yeTCH 
OTnenBHbiH, He HMeiomnn cbh3h c ceTeBHMH HHTep^encaMH , HHTep^enc 
ynpaBneHHH. 

2. BKHHcnHTenBHan ceTB no n. 1, OTnHHaiomaHCH tgia, hto npn 
npoxox^eHHH naKeTOB nepes ceTeBMe HHTep$eHCw b hx saronoBKax 
coxpaHHeTCH 6e3 HSMeneHHH HH^opMai^HH o $H3HHecKOM anpece 
OTnpaBHTenH naxeTa, Tax xax nporpaMMa ynpaBneHHH MexceTeBBiM 
SKpanoM He nepenaeT bo BHemnioio ceTB HH^opMatiHio o ^HSHHecxHx 



15 

anpecax cborx ceTOBBix HHTep^eitcoB • 

3 . BKHHcnHTsnBHaH ceTB no n . 1 / OTHMHaamaHc^i tbm , hto 
MexcGTeBofi 3KpaH nocTpoeH Ha 6a3e yHHsepcanBHoro BUHKcnHTenn 
CO BCTpoeHHOH onepaqHOHHoft cHCTeMod, a TaKxe Hecxon&xHx 
ceTeBHx HHTep4>eHCOB H BNHeneHHoro ynpaBnniomero HHTep$eHca, 
npHHeM ceTeBfiie HHTep^eHCbi «bjihk>tc5i ananTepaMH THna Ethernet, a 
HHTep^eHC ynpaBneHH>i Moxeo? 6£ia?B BbinonHeH KaK Ha 6a3e 
HHTep^eHca THna Ethernet, Tax h na 6a3e nocnenoBaTenBHoro 
acHHxpoHHoro HHTep4)eHca • 

4. BNHHcnHTenBHa^i ceTB no n, 1, OTHHHaroma^ic^ TeM, hto 
npaBHna ^HnBTpaqHH, BfiinojiH5ieM£ie MeacceTeBiaM 3KpaHOM, sanpen^aioa? 
TpaH3HTHyx> nepe^qany nK>6E3x naxeTOB Mexny ceTeBEiMH HHa7ep$eiicciMH , 
KpoMe Tex, KOTopwe HMewT pa3pemeHHHe npHsnaKH h napaMeTpbi 
anpecaqHH b cbohx 3aponoBKax. 

5. BNHHCJiHTenBHaH ceTB no n. 1, OTJiHHaiontaHCH TeM, hto 
nocTyn K nporpaMMe penaKTHposaHHii npaBHn $HnBTpaqHH 
MexceTeBoi?o sxpana san^Hii^eH naponeM. 

'6. MexceTeBofi SKpaH npeflCTaBJiHiomHH co6oh KOMnneKC 
annapaTHbix h nporpaMMHBix cpencTB, conepxamHH no MeHBmefi Mepe 
HBa ceTeBux HHTep^eHca nnn naxeTHOH KOMMyTai^HH j^aHHux Mexny 
cerMe«TaMH BKHHCJiHTenBHoft ceTH, a TaKxe nporpaMMy ynpaBJieHH^i 
nepenaneH naxeTOB Mexny ceTeBBiMH HHTep^eHcaMH b cooTBeTCTBHH c 
npaBHnaMH $HnBTpaqHH, OTHHHaiomHHCii TeM, hto nocne o5pa5oTKH 
naKBTa b cootbgtctbhh c npaBHnaMH ^HJiBTpaqHH coxpaHneT 6e3 
H3MeHeHHii HH$opMaqHK) o $H3HHecKOM H jioPHHecKOM a7:ipecax 
OTnpaBHTen^ xaxnoro h3 naxeTOB, conepxamyiocH b hx 3aronoBKax, 



16 

npHHBM nporpaMMa ynpasneKHH He HasHanaeT cefreBHM HH«Fep$eftcaM 
norHHecKHx anpecoB h He nepe^aeT b cB5i3aHHBie c hhmh ceTeB&ie 
cerMeHTU HH^opMaqHio o5 hx $H3HHecKHx a^pecax, MexceTeBod SKpan 
conepxHT cneqHajiBHHH HHTep^eiic ynpaBneHHK nnn penaKTHpoBaHH5T^ 
KOHTponH H HacTpoHKH npaBHH $HnBTpai4HH, npHHeM nK)6Bie HSMeneHKH 
napaMeTpoB 4)HJiBa»paqHH MoryT ocymecTBJi^TBCH HCKnioHHTenBHo nepes 
HHTep^BHC ynpaBneHHH, npn 3tom nporpaMMa ynpaBnenHH 
o6ecneHHBaeT nepeflany naKSTa c ohho3?o ceTeBoro HHTep$eHca Ha 
npyrofi Ha ocHOBanHH HH$opMaqHH, conepxamencH b saronoBKe 
naKBTa, tohbro b Tex cnyna^x, K03?na anpeca nojiynaTeneH h/khh 
OTnpaBHTeneH naxeTOB ynoBJieTBop^ioT BceM Tpe6oBaHHHM, 
onpeneneHHHM b npaBanax $HJiBa?paL5HH naKeTOB. 

7. MexceTeBOH SKpan no n. 6, OTHHHaiomHHCii TeM, hto 
nocTpoeH Ha 6a3e BBinHCJiHTenH co BCTpoeHHoii onepai^HOHHOH 
CHCTeMOH, yHHBepcajiBHOH mHHoii o6MeHa naHHUMH Mexj^y 
HHTep$eHCHbiMH aflanTepaMH h BBifleneHKBiM KanaxioM ynpaBneHH^i, 
nocTyn K KOTopoMy samnmeH naponeM. 




0Mr. 2 



BbiHMCiiMTe/ibHafl cejb c MexcereBbiM aKpanoM m MexcereBoCi 3KpaH. 




Our. 3 



BfiiHHcnHTeJiBHan cotb c HexceTeBUM 3KpaHOM R MexceTesod 
SKpaH • 

PE<DEPAT 

MexceTeBod 3KpaH j^nsi noKanBH&ix BEiHHCJiHTenBHBix ceTBH 
conepxHT no MeHBrnen Mepe ^Ba ceTesHx HHTep^enca j^n^ naKeTHOH 
KOMMyTai^HH naHHHx Mexny cerMeHTaMH BbiHHcnHTenBHOH csth, 

BUnOnHHeMOH B COOTSeTCTBHH C npOrpaMMOH ^HnBTpai^HH naKBTOB . 

MexceTeBOH 3KpaH nocne o6pa6oa?KH naxeTa b cootbbtctbhh c 
npasHnaMH $HnBTpaqHH coxpanHeo* 6e3 HSMBHeHHH HH^opMaqHK) o 
$H3HHecKOM H HorHHecKOM aj^pecax OTnpaBHTejiH Kaxnoro h3 
naKGTOB, conepxaniyiocH b hx saronoBKax. IIporpaMMa ynpaBJieHH^ ne 
HasHanaeT ceTeBEiM HHTep^encaM jiornHecKHx anpecoB h hg nepe^aeT 

B CBH3aHH£ie C HHMH CeTeBKG CerMBHTH HH^OpMai^HJO o5 HX 
$H3HHGCKHX a^pBCaX • Hto6h o6eCnBHHTB BHBCBHHe H3MBHBHHH B 

npaBHna $HnBTpaLtHH mbxcbtbboh 3KpaH cojqepxHT criBqHanBHWH 

HHTGp$BHC ynpaBHBHHH, npHHBM HIOShB H3MBH6HHH napaMSTpOB 
^HJIBTpaqHH MOryT OCymBCTSnHTBCH HCKniOHHTBJl&HO HGp63 HHTBp$BfkC 

ynpaBJiGHHH. 

2 H . n . $-nBi , <I>Hr . 2 . 



